policy

Documentation

Index

• Constants
• Variables
• func ConstructNamespaceSelector(data []interface{}) (...)
• func FlattenNamespaceSelector(...) (data []interface{})
• func FlattenScope(scopedFullname *ScopedFullname) (data []interface{}, name string)
• func MetaResourceAttributeCheck(resourceName string) []resource.TestCheckFunc
• func ValidateScope(ctx context.Context, diff *schema.ResourceDiff, i interface{}) error
• func ValidateSpecLabelSelectorRequirement(ctx context.Context, diff *schema.ResourceDiff, i interface{}) error
• type Cluster
• type ClusterGroup
• type Scope
• type ScopeHelperResources
  • func NewScopeHelperResources() *ScopeHelperResources
  • func (shr *ScopeHelperResources) GetTestPolicyResourceHelperAndScope(scope Scope) (string, string)
• type ScopedFullname
  • func ConstructScope(d *schema.ResourceData, name string) (scopedFullnameData *ScopedFullname)

Constants

const (
	NamespaceSelectorKey = "namespace_selector"
	MatchExpressionsKey  = "match_expressions"
	KeyKey               = "key"
	OperatorKey          = "operator"
	ValuesKey            = "values"
	ScopeKey             = "scope"

	SpecKey                   = "spec"
	NameKey                   = "name"
	InputKey                  = "input"
	RecipeVersionDefaultValue = "v1"
	UnknownRecipe             = ""
)

Variables

var (
	ScopeSchema = &schema.Schema{
		Type:        schema.TypeList,
		Description: "Scope for the security and custom policy, having one of the valid scopes: cluster, cluster_group or organization.",
		Required:    true,
		ForceNew:    true,
		MaxItems:    1,
		MinItems:    1,
		Elem: &schema.Resource{
			Schema: map[string]*schema.Schema{
				clusterKey:      scoperesource.ClusterPolicyFullname,
				clusterGroupKey: scoperesource.ClusterGroupPolicyFullname,
				organizationKey: scoperesource.OrganizationPolicyFullname,
			},
		},
	}
	ScopesAllowed = [...]string{clusterKey, clusterGroupKey, organizationKey}
)

var NamespaceSelector = &schema.Schema{
	Type:        schema.TypeList,
	Description: "Label based Namespace Selector for the policy",
	Optional:    true,
	MaxItems:    1,
	Elem: &schema.Resource{
		Schema: map[string]*schema.Schema{
			MatchExpressionsKey: {
				Type:        schema.TypeList,
				Description: "Match expressions is a list of label selector requirements, the requirements are ANDed",
				Required:    true,
				Elem:        labelSelectorRequirement,
			},
		},
	},
}

Functions

func ConstructNamespaceSelector

func ConstructNamespaceSelector(data []interface{}) (namespaceSelector *policymodel.VmwareTanzuManageV1alpha1CommonPolicyLabelSelector)

func FlattenNamespaceSelector

func FlattenNamespaceSelector(namespaceSelector *policymodel.VmwareTanzuManageV1alpha1CommonPolicyLabelSelector) (data []interface{})

func FlattenScope

func FlattenScope(scopedFullname *ScopedFullname) (data []interface{}, name string)

func MetaResourceAttributeCheck

func MetaResourceAttributeCheck(resourceName string) []resource.TestCheckFunc

func ValidateScope

func ValidateScope(ctx context.Context, diff *schema.ResourceDiff, i interface{}) error

func ValidateSpecLabelSelectorRequirement

func ValidateSpecLabelSelectorRequirement(ctx context.Context, diff *schema.ResourceDiff, i interface{}) error

Types

type Cluster

type Cluster struct {
	Resource              string
	ResourceVar           string
	ResourceName          string
	KubeConfigPath        string
	Name                  string
	ClusterGroupName      string
	ManagementClusterName string
	ProvisionerName       string
}

type ClusterGroup

type ClusterGroup struct {
	ResourceName string
	Resource     string
	ResourceVar  string
	Name         string
}

type Scope

type Scope int64

const (
	UnknownScope Scope = iota
	ClusterScope
	ClusterGroupScope
	OrganizationScope
)

Allowed scopes.

type ScopeHelperResources

type ScopeHelperResources struct {
	Meta         string
	Cluster      *Cluster
	ClusterGroup *ClusterGroup
	OrgID        string
}

func NewScopeHelperResources

func NewScopeHelperResources() *ScopeHelperResources

func (*ScopeHelperResources) GetTestPolicyResourceHelperAndScope

func (shr *ScopeHelperResources) GetTestPolicyResourceHelperAndScope(scope Scope) (string, string)

GetTestPolicyResourceHelperAndScope builds the helper resource and scope blocks for policy resource based on a scope type.

type ScopedFullname

type ScopedFullname struct {
	Scope                Scope
	FullnameCluster      *policyclustermodel.VmwareTanzuManageV1alpha1ClusterPolicyFullName
	FullnameClusterGroup *policyclustergroupmodel.VmwareTanzuManageV1alpha1ClustergroupPolicyFullName
	FullnameOrganization *policyorganizationmodel.VmwareTanzuManageV1alpha1OrganizationPolicyFullName
}

ScopedFullname is a struct for all types of policy full names.

func ConstructScope

func ConstructScope(d *schema.ResourceData, name string) (scopedFullnameData *ScopedFullname)